Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS398549.roa
File:                     AS398549.roa (raw, json)
Hash identifier:          XptMneSUWm/mONNLbmHSB3HIuJLjWKDu+4eL7GjQ1lU=
Subject key identifier:   D3:83:9F:A6:4D:EE:4B:0C:ED:D1:AF:26:85:70:41:8E:AE:C3:CB:5D
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       7C586489F3A02DD7FB1C1F479BAF754DB8D6065D
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS398549.roa
Signing time:             Tue 22 Aug 2023 12:19:55 +0000
ROA not before:           Tue 22 Aug 2023 12:14:55 +0000
ROA not after:            Tue 20 Aug 2024 12:19:55 +0000
asID:                     398549
IP address blocks:        98.142.250.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 22 Oct 2023 00:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:58:64:89:f3:a0:2d:d7:fb:1c:1f:47:9b:af:75:4d:b8:d6:06:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Aug 22 12:14:55 2023 GMT
            Not After : Aug 20 12:19:55 2024 GMT
        Subject: CN=D3839FA64DEE4B0CEDD1AF268570418EAEC3CB5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:97:89:6b:31:9d:95:35:94:96:fb:e3:41:a4:
                    ac:a5:a3:d3:82:39:e4:33:81:f3:e1:75:4e:c5:a2:
                    e5:2a:86:02:8b:6b:16:c0:75:04:36:ce:a8:3e:b5:
                    51:e3:52:7e:d7:fe:48:d9:33:f0:f8:b4:a7:34:ee:
                    3e:64:42:08:9d:7b:a5:ab:05:17:36:08:ac:3f:ea:
                    a0:5b:85:8d:dc:00:27:c1:d4:a7:ab:8f:4b:ae:58:
                    2f:c4:6a:9a:f3:f1:64:94:e7:0b:43:b0:97:6a:bb:
                    c9:ae:96:cd:d7:e5:3a:96:d0:b6:b3:6e:82:86:67:
                    16:bc:47:af:8f:64:f9:54:4d:c3:ef:2e:7f:48:74:
                    15:54:fc:32:7e:34:c3:71:6b:2c:85:1b:fe:4a:57:
                    6c:c0:a3:a9:7a:3e:c5:13:28:df:12:e7:b1:8b:d4:
                    d1:9b:d6:2e:e9:cd:90:a4:bf:00:6a:d4:9a:01:2a:
                    3f:22:25:c0:36:89:60:68:97:35:74:6e:4d:a0:3d:
                    85:2f:14:ef:70:9e:06:50:19:79:95:48:d8:37:08:
                    5c:05:b0:b0:7e:a8:58:f9:3d:5b:13:4b:df:8b:89:
                    ce:3a:95:fb:6f:6e:63:6a:f8:ad:97:56:09:b1:7d:
                    28:7e:11:f1:fa:0a:5c:0e:f9:9b:e5:36:31:6e:77:
                    fe:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:83:9F:A6:4D:EE:4B:0C:ED:D1:AF:26:85:70:41:8E:AE:C3:CB:5D
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS398549.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.142.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:15:f2:31:67:b3:61:e4:a4:9b:50:08:9a:9a:90:9d:74:fe:
         37:51:80:de:25:f2:85:b5:fc:bb:39:32:b0:a2:65:f8:93:84:
         dc:1d:92:d6:58:06:47:8a:cd:c2:e9:27:ef:da:26:52:a8:01:
         d3:1d:62:88:5e:9e:03:fa:75:eb:94:f1:29:ce:20:7e:78:b6:
         76:1f:56:49:e0:c2:5d:cb:20:e9:fb:64:21:9a:c4:4f:c7:4d:
         41:02:f1:fd:af:2e:b7:d5:2f:a8:90:bc:ec:6f:16:81:fb:8f:
         91:e6:e6:50:a9:21:1f:ab:05:01:df:df:4a:fa:35:a2:18:ea:
         a2:88:f4:be:4b:8d:a0:ff:0c:90:18:20:6c:1a:4b:bd:94:da:
         1c:11:43:df:5e:ab:09:7f:d5:d6:6e:69:e6:82:70:f5:dd:1a:
         bc:88:45:2a:b8:d3:d3:5b:f3:46:7b:dd:81:8b:5b:46:36:fc:
         4b:3f:ff:c9:4f:f8:6a:af:da:10:62:37:e2:cc:bb:ae:b3:23:
         c8:a6:57:45:ab:e4:3c:72:3e:e2:a8:da:b1:de:d6:6a:d7:7b:
         3d:66:ed:39:2d:77:90:6f:02:fb:5d:45:16:b1:74:34:eb:8a:
         07:61:ce:a3:4f:22:93:74:a6:a8:61:8a:9b:31:b5:89:a0:7d:
         f5:3f:f4:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----